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CLAIMS 

1. Method for securing logical access to information (1) and/or computing resources 
(2) in a group of computer equipment (3) while slowing down said logical access as little as 
possible, 

said group of computer equipment (3) exchanging data (4) with a computer 
telecommunication network (5), via an access device (6), 

said data (4) including transported data (7) that conform to at least one application 
protocol (8), as well as transport data (9), 

said access device (6) including an operating system (10), 

said method comprising the following steps: 

- the step of defining, for each application protocol (8) , a finite-state machine (1 1), 

- the step of modeling, in the form of a model (12) , each finite-state machine (11), 
the step of generating from each model (12), by means of an interpreter (13), an 

analysis module (14) for each application protocol (8), 

the step of filtering the transported data (7) in said operating system (10), by 
means of said analysis modules (14). 

2. Method according to claim 1, said method also comprising: 

the step of verifying, by means of said analysis modules (14), the conformity of 
said transported data (7) with the application protocols (8) involved. 

3. Method according to either of claims 1 and 2, said method also comprising: 

the step of restricting, by means of the analysis module (14), the capabilities 
offered by an application protocol (8). 

4. Method according to claim 3, said method also comprising: 

the step, for a network administrator (15), for parameterizing said analysis 
modules (14) in accordance with predetermined restrictions (16). 
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5. Access device (6) for securing logical access to information (1) and/or computing 
resources (2) in a group of computer equipment (3) while slowing down said logical access 
as little as possible, 

said group of computer equipment (3) exchanging data (4) with a computer 
telecommunication network (5), via said access device (6), 

said data (4) including transported data (7) that conform to at least one application 
protocol (8), as well as transport data (9), 
said access device (6) comprising: 

an operating system (10) that includes an appropriate analysis module (14) for 
each application protocol (8), 

filtering means for filtering said transported data (7) in said operating system 
(10), by means of said analysis modules (14). 

6. Access device (6) according to claim 5, each analysis module (14) implementing 
a finite-state machine (11) representing a given application protocol (8). 

7. Access device (6) according to either of claims 5 and 6, said analysis modules 
(14) including: 

first information processing means (17) for verifying the conformity of said 
transported data (7) with said application protocols (8) involved. 

8. Access device (6) according to any of claims 5 through 7, said analysis modules 
(14) including: 

second information processing means (18) for restricting the capabilities offered 
by an application protocol (8). 

9. Access device (6) according to claim 8, said access device (6) also comprising: 

parameterization means (19) that allow a network administrator (15) to 
parameterize said analysis modules (14) in accordance with predetermined restrictions (16). 
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